fix(deps): bump etcd 3.5.21->3.5.30 to clear grpc-go auth-bypass CVE (#2201)

* fix(deps): bump etcd 3.5.21->3.5.30 to clear grpc-go auth-bypass CVE

Signed-off-by: Dong Hyuk Chang <9426164+thomasdhc@users.noreply.github.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix(deps): bump etcd 3.5.30->3.5.32 to also clear x/net idna CVE

Signed-off-by: Dong Hyuk Chang <9426164+thomasdhc@users.noreply.github.com>
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Signed-off-by: Dong Hyuk Chang <9426164+thomasdhc@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: thomasdhc

docker/common/install_etcd_nats.sh

@@ -15,10 +15,10 @@
 
 set -xeuo pipefail
 
-# Versions pinned to match upstream ai-dynamo/dynamo container/context.yaml,
-# so Dynamo-Curator integration runs the same etcd/nats-server binaries as
-# Dynamo's own runtime images.
-ETCD_VERSION=3.5.21
+# nats-server matches upstream ai-dynamo/dynamo container/context.yaml. etcd
+# leads Dynamo's pin (3.5.30) to the latest 3.5.x patch to clear the bundled
+# grpc-go + x/net CVEs; 3.5.x binaries stay wire-compatible with Dynamo.
+ETCD_VERSION=3.5.32
 NATS_VERSION=2.10.28
 
 for i in "$@"; do